IDoc data transfer is secure or not

[Former Member]

Hi,

I am working on SAP 470 620 system. For one of the interfaces we are sending daily IDocs from our server to an external server.

The Business is in process to confirm if all the data sent from the server is in secured mode or not. For example they are checking if the files are transferred in sFTP mode and not in FTP. They also want a confirmation that the data exchanged between the systems using IDocs is secured or not.

Does any one has any update if it is secure transfer.

Your valuable inputs are highly appreciated. Thanks in anticipation.

Thanks and Regards,

Rahul

[Former Member]

Hi,

I am working on SAP 470 620 system. For one of the interfaces we are sending daily IDocs from our server to an external server.

The Business is in process to confirm if all the data sent from the server is in secured mode or not. For example they are checking if the files are transferred in sFTP mode and not in FTP. They also want a confirmation that the data exchanged between the systems using IDocs is secured or not.

Does any one has any update if it is secure transfer.

Your valuable inputs are highly appreciated. Thanks in anticipation.

Thanks and Regards,

Rahul

[Former Member]

As far as the systems are in the Secure environment (Company intranet) it should be fine. If the systems are exposed to outside world(internet) somehow then its risky and should be handled by infrastrucutre team.

Again it depends what type of RFC Connection you are doing in SM59.

Hope this helps!

Regards

Shital

[Former Member]

Hi Rahul,

the data can be transfered to external sytem using interfaces..

1. RFC

2. BAPI

3.IDOC

the data can be transfered to external sytem using above three methods.

as per security the idoc is preferred.

Regards,

Prabhu

[Former Member]

Hi,

Using IDOCs, we would use tRFC connections, maybe look at ALE user authorizations.

The standard idoc program to send out the IDOCs to ECC, the job that does this- can be checked for users allowed to run it.

Regards,

Venkat

[Former Member]

You need to provide more information to get an answer. You send an idocs to port, which point RFC destination (SM59 t-code). There you can point another SAP system, XI, Business Connector, third party tools etc. It depends how the data is transferred later, if it goes via XML files via https / ftps protocol or not..

Then it will be possible to verify whether you send the idocs in secure mode or not.

[Former Member]

Hi,

The RFC destination maintained in SM59 is a R/3 connection (tRFC). The IDocs are sent directly to the XI system. The question I have is the data sent via tRFC port in IDoc format is secured or not.

Waiting for your valuable inputs.

Thanks,

Rahul

[Former Member]

You can secure the tRFC connections with SNC or platform specific solutions (like VPN). If you do not use any of those the RFC connection is not encrypted and only password protected.

[Former Member]

Hello,

In SM59 check the "Logon and Security" tab and search for the SNC field.

Check the online help for SNC enabling (system parameters, certificates, ...).

[http://help.sap.com/saphelp_NW70EHP1/helpdata/en/72/e52c4057cb185de10000000a1550b0/content.htm|http://help.sap.com/saphelp_NW70EHP1/helpdata/en/72/e52c4057cb185de10000000a1550b0/content.htm]

[http://help.sap.com/saphelp_NW70EHP1/helpdata/en/13/4a3ad42ae78e4ca256861e078b4160/frameset.htm|http://help.sap.com/saphelp_NW70EHP1/helpdata/en/13/4a3ad42ae78e4ca256861e078b4160/frameset.htm]

Wim